98,920 indexed

CVECVE vulnerabilities

98,920 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.

Showing 7,551–7,600 of 98,920 · page 152 of 1979

IDTitleSummary
CVE-2026-87110CVE-2026-87110
CVSS 5.3
An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limit…
CVE-2026-8711CVE-2026-8711
CVSS 8.1f5
NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, …
CVE-2026-87109CVE-2026-87109
CVSS 5.3
An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that …
CVE-2026-87108CVE-2026-87108
CVSS 3.1
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they posse…
CVE-2026-87107CVE-2026-87107
CVSS 5.4
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog deregistration path that may allow a local ACL token to delete peer-impor…
CVE-2026-87106CVE-2026-87106
CVSS 6.5
Consul and Consul Enterprise are vulnerable to a denial of service in the native RPC listener that may allow an authenticated client to exhaust server memory b…
CVE-2026-87105CVE-2026-87105
CVSS 8.8
Tanium addressed a SQL injection vulnerability in Threat Response.
CVE-2026-87093CVE-2026-87093
CVSS 8.8
Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from …
CVE-2026-87091CVE-2026-87091
CVSS 7.2
The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versions up to, and incl…
CVE-2026-87090CVE-2026-87090
CVSS 8.3
Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete anothe…
CVE-2026-8709CVE-2026-8709
CVSS 9.9progress
An improper privilege management vulnerability in the REST API document patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authent…
CVE-2026-87088CVE-2026-87088
CVSS 7.0tanium
Tanium addressed an unauthorized code execution vulnerability in Enforce.
CVE-2026-87087CVE-2026-87087Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this cand…
CVE-2026-87084CVE-2026-87084
CVSS 7.7tanium
Tanium addressed a server-side request forgery vulnerability in Enforce.
CVE-2026-87083CVE-2026-87083
CVSS 5.5
A weakness has been identified in tile-ai tilelang up to 0.1.14. This impacts the function KernelCache._load_kernel_from_disk of the file tilelang/cache/kernel…
CVE-2026-87082CVE-2026-87082
CVSS 7.5
Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode. Neither backend chec…
CVE-2026-87081CVE-2026-87081
CVSS 7.5
Net::IDN::UTS46 versions before 2.590 for Perl allow CPU exhaustion via quadratic punycode encoding of an overlong label before the length check in to_ascii. …
CVE-2026-87080CVE-2026-87080
CVSS 9.1
Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode. The pure-…
CVE-2026-87079CVE-2026-87079
CVSS 7.5
Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion via quadratic insertion cost when decoding a long label in decode_punycode. The XS back…
CVE-2026-87078CVE-2026-87078
CVSS 9.1
Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode. The XS backend allocates the s…
CVE-2026-87076CVE-2026-87076
CVSS 6.5
Tanium addressed an information disclosure vulnerability in Discover.
CVE-2026-87075CVE-2026-87075
CVSS 8.1tanium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87074CVE-2026-87074
CVSS 3.7
The Forminator Forms WordPress plugin before 1.57.2.1 does not bind its saved-draft notification to the visitor who created the draft, and takes both the reci…
CVE-2026-87073CVE-2026-87073
CVSS 6.5tanium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87072CVE-2026-87072
CVSS 7.1tanium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87071CVE-2026-87071
CVSS 5.3
The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which metadata keys a form submission may supply, and does not exclude the keys WordPre…
CVE-2026-87070CVE-2026-87070
CVSS 5.3
The Forminator Forms WordPress plugin before 1.57.2.1 does not verify that a request came from a trusted proxy before preferring client-supplied forwarding hea…
CVE-2026-87069CVE-2026-87069
CVSS 3.1
The Forminator Forms WordPress plugin before 1.57.2.1 does not perform a nonce, capability or ownership check before running a one-time payment-field migratio…
CVE-2026-87068CVE-2026-87068
CVSS 6.6
The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it enforces elsewhere when a registration form is nested inside an im…
CVE-2026-87067CVE-2026-87067
CVSS 8.5
The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instantiated when it deserialises a value taken from an XML-RPC r…
CVE-2026-8706CVE-2026-8706
CVSS 6.5mozilla
Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receiv…
CVE-2026-8705CVE-2026-8705
CVSS 7.5
The ClearSale Total plugin for WordPress is vulnerable to SQL Injection via the `pagseguro[metodo]` POST parameter of the `clearsale_total_push` AJAX action in…
CVE-2026-87048CVE-2026-87048
CVSS 5.4tanium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87047CVE-2026-87047
CVSS 6.3tanium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87046CVE-2026-87046
CVSS 4.3tanium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87037CVE-2026-87037
CVSS 5.4tanium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87036CVE-2026-87036
CVSS 8.1tanium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87035CVE-2026-87035
CVSS 4.3tanium
Tanium addressed an information disclosure vulnerability in Comply.
CVE-2026-87034CVE-2026-87034
CVSS 8.3tanium
Tanium addressed a SQL injection vulnerability in Comply.
CVE-2026-87033CVE-2026-87033
CVSS 5.4tanium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87032CVE-2026-87032
CVSS 4.3
Tanium addressed an information disclosure vulnerability in Tanium Server.
CVE-2026-87031CVE-2026-87031
CVSS 2.7concretecms
n Concrete CMS 9.2.0 through 9.5.3, the REST API user creation endpoint (POST /ccm/api/1.0/users, the add() method of concrete/src/Api/Controller/Users.php) di…
CVE-2026-87030CVE-2026-87030
CVSS 8.5tanium
Tanium addressed a path traversal vulnerability in Comply.
CVE-2026-87028CVE-2026-87028
CVSS 6.5concretecms
Concrete CMS 9 through 9.5.3 did not confirm that a board InstanceItem submitted to the custom-slot preview endpoint belonged to the board instance the request…
CVE-2026-87026CVE-2026-87026
CVSS 3.8
Tanium addressed an improper access controls vulnerability in Threat Response.
CVE-2026-87025CVE-2026-87025
CVSS 5.4tanium
Tanium addressed an improper access controls vulnerability in Comply.
CVE-2026-87024CVE-2026-87024
CVSS 7.2
Tanium addressed a SQL injection vulnerability in Asset.
CVE-2026-87023CVE-2026-87023
CVSS 8.5tanium
Tanium addressed a path traversal vulnerability in Comply.
CVE-2026-87022CVE-2026-87022
CVSS 7.5
Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This…
CVE-2026-87021CVE-2026-87021
CVSS 7.2tanium
Tanium addressed an unauthorized code execution vulnerability in Comply.
Sourced from NVD + CISA KEV + FIRST EPSS. Curated by Adam Lundqvist, Founder at SQUR.